Privacy statement

1. Name of register

Aaria Unemployment Fund’s Member and Payment Register

2. Controller

Aaria Unemployment Fund
Kumpulantie 3
00520 HELSINKI
asiakaspalvelu@aariakassa.fi
www.aariakassa.fi

3. Controller’s contact persons

Person in charge of the data file: Fund Director Petteri Syväoja
Contact person: Merja Suuronen
Contact information: see Paragraph 2

4. Data protection officer

Arto Pirinen, tietosuojavastaava@aariakassa.fi

5. Lawful basis and purpose of processing personal data

The unemployment fund grants earnings-related unemployment allowance in accordance with the Unemployment Security Act and other statutory benefits within the Fund’s sphere of jurisdiction to its members. In order to carry out this statutory task, the fund maintains and processes personal data of its current and former members, information about the benefits paid to them, and information relevant to the payment of those benefits.

The data is used for the arrangement of statutory benefits for members, member services, managing membership matters, and developing fund operations, including activities such as member satisfaction surveys.

Additionally, we may process data based on our legitimate interest, for example, in cases involving investigations into suspected abuse of benefits.

The data will not be used for any other purposes.

6. Data content of the register

The unemployment fund collects only data necessary for processing benefit applications, providing member services, and developing those services. This includes, for example:

• personal and contact information including personal identity number,
• name of a representative organization or union for verifying membership fees,
• basic information related to the membership,
• and any other information you may provide us.

For members who have received or are receiving benefits, the following may also be stored:

• the grounds for paying the allowance,
• type and possible subtype of the benefits for purposes official statistics,
• decisions related to the payment of allowances,
• amounts, dates, and periods of allowances paid,
• deductions made on paid allowances to the Tax Administration, other authorities, Kela, and the fund
• withholding tax information for the current year,
• bank account number,
• other information and documents necessary for the payment of the allowance, and
• information related to possible recovery or complaint cases.

7. Regular sources of data

The member register of the unemployment fund receives data primarily from documents submitted by the applicant (e.g. membership applications and any benefit applications with attachments). Information is also received from the previous and new unemployment funds, authorities, and employers. Unions’ membership registers may also provide data about membership fee payments.

In addition, data may be collected from official registers to which the unemployment fund has access, such as the Incomes Register maintained by the Tax Administration or Kela’s benefit information register.

8. Categories of recipients to whom personal data has been or will be disclosed

Information is disclosed to a new unemployment fund when a member has resigned or been expelled from Aaria Unemployment Fund. Upon request from the new fund, this data is provided in paper or electronic format for handling membership matters and benefit payments.

In addition, statutory information in the register related to the payment of allowances is disclosed to the relevant authorities such as the Finnish Financial Supervisory Authority, the Finnish Centre for Pensions, the Employment Fund, Ministry of Economic Affairs and Employment, and the Social Insurance Institution (Kela).

Data is disclosed to the Finnish Tax Administration in electronic format in order to take into account paid membership dues and allowances and tax withheld on them at source in the data subject’s taxation.

Upon request, data is also disclosed to other authorities who have a legal right to access such data, such as the employment authority, Kela, the Ministry of Social Affairs and Health, the Tax Administration, municipal social services, enforcement authorities, criminal investigation authorities and courts, educational institutions, and insurance and pension providers.

If you are a member of both the fund and the union, your data will be disclosed to the member community or union in paper form or electronically using an encrypted connection for the purpose of monitoring the fund’s membership fees.

The processor of personal data in the register is the service provider Futunio Oy, with which the fund has entered into an agreement that complies with the requirements of the EU General Data Protection Regulation (GDPR).

The unemployment fund may also use other sub-processors who may have access to personal data to carry out agreed tasks. For example, outsourcing a member satisfaction survey. All sub-processors are required to sign confidentiality agreements and contracts ensuring compliance with the GDPR. This also applies to unions when an individual is a member of both the unemployment fund and a union.

Data is not disclosed to third parties and will not be used for direct marketing.

9. Disclosure of personal data to third countries or international organisations

Data is not transferred to third countries outside the EU or the EEA, Switzerland, or the United Kingdom or to international organisations.

10. Retention period of personal data or criteria for determining the retention period

Data is retained as long as necessary for processing purposes.

Retention periods are defined in the fund’s currently valid archiving plan.

11. Overview of technical and organisational safeguards

The information systems used to store data are technically secured and located in locked and monitored premises.

The network is protected by firewalls and other technical measures.

Systems are protected by personal usernames and passwords, and access logs are maintained.

All employees and subcontractors of the unemployment fund are bound by confidentiality, and system access rights are granted based on job responsibilities.

Manual materials are stored in locked facilities.

Written contracts with subcontractors such as Futunio Oy (payment system provider) include obligations to appropriately protect data against risks, in accordance with the GDPR.

12. Rights of data subject and updates to this statement

Members of the unemployment fund have the right under Article 15 of the GDPR to review their personal data and under Article 16 to request correction of any errors.

Data can be reviewed and updated via the fund’s eService, accessible through a link on www.aariakassa.fi. Otherwise, requests must be submitted in writing. The data will be provided electronically after a sufficiently specific request has been received through the eService. Requesting access to data is free of charge once a year.

The data subject has the right to request erasure of their data under Article 17. This right is limited to the situations described in the article, such as when the fund is legally required to retain certain data.

The data subject has the right to request restriction of processing under Article 18.

Data subjects have the right to have their personal data transferred to another controller in the manner and situations described in Article 20. For this purpose, the fund employs a method agreed jointly by employment funds that allows membership to be transferred easily from one fund to another.

If the processing is done on the basis of consent pursuant to Article 6(1) or Article 9(2), the data subject has the right to withdraw consent on the basis of Article 7(3). As a rule, the unemployment fund does not process personal data on the basis of consent.

Data subjects have the right to lodge a complaint with the supervisory authority in the manner described in Article 77 if they feel that the processing of their personal data is in violation of the EU GDPR. Information about the authority can be found on the Finnish Data Protection Ombudsman’s website: www.tietosuoja.fi.

More information about the EU General Data Protection Regulation can be found on the European Union’s website.

Relevant articles:

Article 6: Lawfulness of processing
Article 7: Conditions for consent
Article 9: Processing of special categories of personal data
Article 15: Right of access
Article 16: Right to rectification
Article 17: Right to erasure
Article 18: Right to restriction of processing
Article 20: Right to data portability
Article 77: Right to lodge a complaint with a supervisory authority

We reserve the right to update this privacy statement.

Last updated on: 2 October 2025